CVE-2020-25674

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.8-68

Description The issue is related to the WriteOnePNGImage() function from coders/png.c (the PNG coder) which has a for loop with an improper exit condition. This can allow an out-of-bounds READ via heap-buffer-overflow because the loop condition will attempt to pass invalid colormap data to the event logger if the colormap has less than 256 valid values. The flaw could impact application availability when a specially crafted input file is processed by ImageMagick.

Recommendations For ImageMagick versions prior to 7.0.8-68, update to version 7.0.8-68 or later to resolve the issue. As a temporary workaround, consider restricting the use of the WriteOnePNGImage() function until a patch is available. Avoid using specially crafted input files that could trigger the heap-buffer-overflow.